Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-30_aabd72afdb5922dc98c17902caa54a91_cryptolocker

  • Size

    47KB

  • Sample

    240430-xkjb9sde9x

  • MD5

    aabd72afdb5922dc98c17902caa54a91

  • SHA1

    42f1ebaa4a94e0a5205a969ca22bc10e340e38f4

  • SHA256

    eb8cd4f22df31e24393b2c7cf2977dfc8a46d4c2d01a936a04d8d2a81ae236ee

  • SHA512

    a1968732e93b69b69525c98b053bfbac2120630860b72e0204c52097a2c30a63e0be2f344e36e7bbaab5219e54fb1a6c48796f45f5f45ff7673013134a6cce4d

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0nz:vj+jsMQMOtEvwDpj5HczerLO04BI

Score
10/10

Malware Config

Targets

    • Target

      2024-04-30_aabd72afdb5922dc98c17902caa54a91_cryptolocker

    • Size

      47KB

    • MD5

      aabd72afdb5922dc98c17902caa54a91

    • SHA1

      42f1ebaa4a94e0a5205a969ca22bc10e340e38f4

    • SHA256

      eb8cd4f22df31e24393b2c7cf2977dfc8a46d4c2d01a936a04d8d2a81ae236ee

    • SHA512

      a1968732e93b69b69525c98b053bfbac2120630860b72e0204c52097a2c30a63e0be2f344e36e7bbaab5219e54fb1a6c48796f45f5f45ff7673013134a6cce4d

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0nz:vj+jsMQMOtEvwDpj5HczerLO04BI

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks